What is an apex domain?
The apex is the bare domain with nothing in front of it, example.com, and www.example.com is a subdomain of it. Both can serve a site, and neither is better. What matters is that they agree: one host is the home, and the other sends every visitor and every crawler to it with one permanent redirect. Search engines call that home the canonical host.
What does the verdict mean?
Pass: one host answers 2xx over HTTPS and the other redirects to it in one hop with a 301 or 308. Warn, temporary: the redirect is a 302, 303, or 307, which search engines read as a weaker canonical signal. Warn, split: both hosts serve a page and neither redirects. Fail: a host has no A or AAAA record, the two hosts redirect to each other, or the redirect lands somewhere that does not answer.
When a one-hop redirect exists, the check also sends one fixed deep link of its own, a path with a query string, through the redirecting host. The result says whether both parts arrive, the path is dropped, or the query is dropped. That row explains; it never changes the verdict.
Why does the check say my domain does not resolve when the site works?
The check asks Cloudflare's DNS resolver for A and AAAA records of both hosts at that moment, then sends one HTTPS request to each with redirects disabled. A record added minutes ago can still be missing there while your own resolver has it. A host that answers only plain HTTP, or blocks automated requests, can also fail here while a browser gets through. Check again later, and read the two host rows for which step failed.